Overview

overview

10

Static

static

10

b50feaa17c...cb.exe

windows7-x64

10

b50feaa17c...cb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b50feaa17cd93050f512aee311ebdbcb.exe

  • Size

    45KB

  • MD5

    b50feaa17cd93050f512aee311ebdbcb

  • SHA1

    32fae888863f00c97229b9944cf70cac85d1ef1c

  • SHA256

    b1d78245b605729b11897c48a64cfbf8299ff84a905ff89fa42ad76acbf93b73

  • SHA512

    0f45a46d13ad4c09ffbfab255ac6b52476682e2ba41ce1832b40c019778dc3e4e1659d656e4d113de194a39b4b4d7423e9972fd6a93b0e072524c0ca977ea3a6

  • SSDEEP

    768:SdhO/poiiUcjlJInysWH9Xqk5nWEZ5SbTDaPuI7CPW5R:0w+jjgnMH9XqcnW85SbTauIp

Score
10/10
xenorat

Malware Config

Extracted

Family

xenorat

C2

147.185.221.24

Mutex

kemo_nd8912d

Attributes
  • delay

    5000

  • install_path

    appdata

  • port

    47517

  • startup_name

    nothingset

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
    xenorat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b50feaa17cd93050f512aee311ebdbcb.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections